Home | Site Map | Cisco How ToNet How To | Wireless |Search | Forums | Services | Donations | Careers | About Us | Contact Us|

IAS Event ID 2 with Reason-Code = 16

Cisco Router, Firewall, VPN, SDM, ASA and Switch

IAS Event ID 2 with Reason-Code = 16

Postby guest » Mon Mar 03, 2008 3:17 pm

Sorrry for the double post, it's been that kind of day. Anyways i figured
out the problem. My 1 test laptop is not keeping time or date. So once i set
that correctly it authenicated no problem. My other test workstation did not
have Q815485_WXP_SP2_x86_ENU.exe installed. Once that was installed it
worked.

Thanks as always for those in this group that take the time to help.


"CB" <cblairATfargo.com> wrote in message
news:%23$3kJRHKEHA.1340@TK2MSFTNGP12.phx.gbl...
> I am trying to setup PEAP authentication to a Windows 2000 sp4 server
using
> IAS. This setup is in a test lab. the client is a Winxp SP1 with all the
> latest updates. I keep receiving the following the event listed below. I
> know the password is correct. I have also made sure, many times, that the
> shared secret between the wireless AP and the Radius server match. Does
> anyone have any suggestions? I have also included the RAS logs.
>
> Thank You!
>
> Event Type: Warning
> Event Source: IAS
> Event Category: None
> Event ID: 2
> Date: 4/22/2004
> Time: 9:04:16 AM
> User: N/A
> Computer: TEST
> Description:
> User TESTDOMAIN\cblair was denied access.
> Fully-Qualified-User-Name = testdomain.fargo.com/Users/cblair
> NAS-IP-Address = 192.168.123.6
> NAS-Identifier = 3Com Access Point
> Called-Station-Identifier = 000d54fdb8ec
> Calling-Station-Identifier = 00904b6839d4
> Client-Friendly-Name = WirelessAP01
> Client-IP-Address = 192.168.123.6
> NAS-Port-Type = 19
> NAS-Port = 19
> Policy-Name = WirelessUsersREMOTEACCESSPOL
> Authentication-Type = EAP
> EAP-Type = <undetermined>
> Reason-Code = 16
> Reason = There was an authentication failure because of an unknown user
> name or a bad password.
>
>
> [852] 14:21:17:059: EapPeapEnd
> [852] 14:21:17:119: EapTlsEnd
> [852] 14:21:17:119: EapTlsEnd(testdomain\cblair)
> [852] 14:21:17:119: EapPeapEnd done
> [852] 14:21:17:119: EapPeapEnd
> [852] 14:21:17:119: EapTlsEnd
> [852] 14:21:17:119: EapTlsEnd(testdomain\cblair)
> [852] 14:21:17:119: EapPeapEnd done
> [852] 14:21:17:119: EapPeapEnd
> [852] 14:21:17:119: EapTlsEnd
> [852] 14:21:17:119: EapTlsEnd(testdomain\cblair)
> [852] 14:21:17:119: EapPeapEnd done
> [1316] 14:23:00:517: RasEapGetInfo
> [1316] 14:23:00:517: EapPeapBegin
> [1316] 14:23:00:517: PeapReadUserData
> [1316] 14:23:00:517:
> [1316] 14:23:00:517: EapTlsBegin(TESTDOMAIN\cblair)
> [1316] 14:23:00:517: State change to Initial
> [1316] 14:23:00:517: EapTlsBegin: Detected PEAP authentication
> [1316] 14:23:00:517: MaxTLSMessageLength is now 16384
> [1316] 14:23:00:517: CRYPT_E_NO_REVOCATION_CHECK will not be ignored
> [1316] 14:23:00:517: CRYPT_E_REVOCATION_OFFLINE will not be ignored
> [1316] 14:23:00:517: The root cert will not be checked for revocation
> [1316] 14:23:00:517: The cert will be checked for revocation
> [1316] 14:23:00:517: EapPeapBegin done
> [1316] 14:23:00:517: EapPeapMakeMessage
> [1316] 14:23:00:517: EapPeapSMakeMessage
> [1316] 14:23:00:517: PEAP:PEAP_STATE_INITIAL
> [1316] 14:23:00:517: EapTlsSMakeMessage
> [1316] 14:23:00:517: EapTlsReset
> [1316] 14:23:00:517: State change to Initial
> [1316] 14:23:00:517: GetCredentials
> [1316] 14:23:00:517: Flag is Server and Store is local Machine
> [1316] 14:23:00:517: GetCachedCredentials
> [1316] 14:23:00:517: PEAP GetCachedCredentials: Using cached credentials.
> [1316] 14:23:00:517: BuildPacket
> [1316] 14:23:00:517: << Sending Request (Code: 1) packet: Id: 2, Length:
6,
> Type: 13, TLS blob length: 0. Flags: S
> [1316] 14:23:00:517: State change to SentStart
> [1316] 14:23:00:517: EapPeapSMakeMessage done
> [1316] 14:23:00:517: EapPeapMakeMessage done
> [1760] 14:23:00:607: EapPeapMakeMessage
> [1760] 14:23:00:607: EapPeapSMakeMessage
> [1760] 14:23:00:607: PEAP:PEAP_STATE_TLS_INPROGRESS
> [1760] 14:23:00:607: EapTlsSMakeMessage
> [1760] 14:23:00:607: MakeReplyMessage
> [1760] 14:23:00:607: Reallocating input TLS blob buffer
> [1760] 14:23:00:607: SecurityContextFunction
> [1760] 14:23:00:607: AcceptSecurityContext returned 0x90312
> [1760] 14:23:00:607: State change to SentHello
> [1760] 14:23:00:607: BuildPacket
> [1760] 14:23:00:607: << Sending Request (Code: 1) packet: Id: 3, Length:
> 1396, Type: 13, TLS blob length: 3878. Flags: LM
> [1760] 14:23:00:617: EapPeapSMakeMessage done
> [1760] 14:23:00:617: EapPeapMakeMessage done
> [1316] 14:23:00:718: EapPeapMakeMessage
> [1316] 14:23:00:718: EapPeapSMakeMessage
> [1316] 14:23:00:718: PEAP:PEAP_STATE_TLS_INPROGRESS
> [1316] 14:23:00:718: EapTlsSMakeMessage
> [1316] 14:23:00:718: BuildPacket
> [1316] 14:23:00:718: << Sending Request (Code: 1) packet: Id: 4, Length:
> 1396, Type: 13, TLS blob length: 0. Flags: M
> [1316] 14:23:00:718: EapPeapSMakeMessage done
> [1316] 14:23:00:718: EapPeapMakeMessage done
> [1760] 14:23:00:818: EapPeapMakeMessage
> [1760] 14:23:00:818: EapPeapSMakeMessage
> [1760] 14:23:00:818: PEAP:PEAP_STATE_TLS_INPROGRESS
> [1760] 14:23:00:818: EapTlsSMakeMessage
> [1760] 14:23:00:818: BuildPacket
> [1760] 14:23:00:818: << Sending Request (Code: 1) packet: Id: 5, Length:
> 1108, Type: 13, TLS blob length: 0. Flags:
> [1760] 14:23:00:818: EapPeapSMakeMessage done
> [1760] 14:23:00:818: EapPeapMakeMessage done
> [1316] 14:23:00:918: EapPeapMakeMessage
> [1316] 14:23:00:918: EapPeapSMakeMessage
> [1316] 14:23:00:918: PEAP:PEAP_STATE_TLS_INPROGRESS
> [1316] 14:23:00:918: EapTlsSMakeMessage
> [1316] 14:23:00:918: MakeReplyMessage
> [1316] 14:23:00:918: SecurityContextFunction
> [1316] 14:23:00:918: AcceptSecurityContext returned 0x80090318
> [1316] 14:23:00:918: State change to SentFinished. Error: 0x80090318
> [1316] 14:23:00:918: Negotiation unsuccessful
> [1316] 14:23:00:918: BuildPacket
> [1316] 14:23:00:918: << Sending Failure (Code: 4) packet: Id: 6, Length:
4,
> Type: 0, TLS blob length: 0. Flags:
> [1316] 14:23:00:918: AuthResultCode = (-2146893032), bCode = (4)
> [1316] 14:23:00:918: EapPeapSMakeMessage done
> [1316] 14:23:00:918: EapPeapMakeMessage done
>
Tablet and Smartphone Setup Guide
http://www.quicksetupguide.com

Troubleshooting Vista Wireless
http://chicagotech.net/
guest
 
Posts: 10191
Joined: Mon Nov 27, 2006 1:10 pm

Return to Cisco

Your Ad Here

Who is online

Users browsing this forum: No registered users and 0 guests